Security Ninja (Premium)
PluginCheck your site for security vulnerabilities and get precise suggestions for corrective actions on passwords, user accounts, file permissions, database security, version hiding, plugins, themes, security headers and othe...
- 0 stars
- 0 watching
- 0 downloads
- License not declared
Show 126 versions not available yet
Releases named in the vendor’s changelog or on WordPress.org that the repository does not have yet.
-
5.303 Not available yet Release date not stated
2026-09-08
-
5.302 Not available yet Release date not stated
2026-09-01
-
5.301 Not available yet Release date not stated
2026-08-31
-
5.300 Not available yet Release date not stated
2026-08-25
-
5.299 Not available yet Release date not stated
2026-08-24
-
5.298 Not available yet Release date not stated
2026-08-18
-
5.297 Not available yet Release date not stated
2026-08-14
-
5.296 Not available yet Release date not stated
2026-08-11
-
5.295 Not available yet Release date not stated
2026-08-03
-
5.294 Not available yet Release date not stated
2026-08-02
-
5.293 Not available yet Release date not stated
2026-07-22
-
5.292 Not available yet Release date not stated
2026-07-15
-
5.291 Not available yet Release date not stated
2026-07-06
-
5.290 Not available yet Release date not stated
2026-06-30
-
5.284 Not available yet Release date not stated
2026-05-23
-
5.283 Not available yet Release date not stated
2026-05-18
-
5.282 Not available yet Release date not stated
2026-05-05
-
5.281 Not available yet Release date not stated
2026-04-22
-
5.280 Not available yet Release date not stated
2026-04-17
-
5.279 Not available yet Release date not stated
2026-04-15
-
5.277 Not available yet Release date not stated
2026-04-04
-
5.276 Not available yet Release date not stated
2026-03-27
-
5.275 Not available yet Release date not stated
2026-03-16
-
5.274 Not available yet Release date not stated
Including email template properly.
-
5.273 Not available yet Release date not stated
2026-03-07
-
5.272 Not available yet Release date not stated
2026-03-04
-
5.271 Not available yet Release date not stated
2026-02-25
-
5.270 Not available yet Release date not stated
2026-02-22
-
5.269 Not available yet Release date not stated
2026-02-19
-
5.268 Not available yet Release date not stated
2026-02-18
-
5.267 Not available yet Release date not stated
2026-02-13
-
5.266 Not available yet Release date not stated
2026-02-10
-
5.265 Not available yet Release date not stated
2026-02-09
-
5.264 Not available yet Release date not stated
2026-01-31
-
5.263 Not available yet Release date not stated
2026-01-25
-
5.262 Not available yet Release date not stated
2026-01-20
-
5.261 Not available yet Release date not stated
2025-11-17
-
5.260 Not available yet Release date not stated
2025-11-12
-
5.259 Not available yet Release date not stated
2025-11-07
-
5.258 Not available yet Release date not stated
2025-11-06
-
5.257 Not available yet Release date not stated
2025-10-22
-
5.256 Not available yet Release date not stated
2025-10-09
-
5.255 Not available yet Release date not stated
NEW: Added XML-RPC protection feature. This update enhances your site's security by allowing you to easily enable or disable XML-RPC access.
-
5.254 Not available yet Release date not stated
NEW: Add secret key display and copy functionality to 2FA module in frontend and backend. Allowing users to easier add the key to their syst...
-
5.253 Not available yet Release date not stated
NEW: Setting up 2FA for users in admin pages
-
5.252 Not available yet Release date not stated
Fixes for REST API warnings.
-
5.251 Not available yet Release date not stated
Fix: Removed extra whitespace in "import/export".
-
5.250 Not available yet Release date not stated
Remove translated messages for errors logging in, creating a loop trying to present translated messages using WP's translation engine.
-
5.229 Not available yet Release date not stated
2025-03-20
-
5.228 Not available yet Release date not stated
2025-02-03
-
5.227 Not available yet Release date not stated
2025-01-29
-
5.226 Not available yet Release date not stated
2025-01-27
-
5.225 Not available yet Release date not stated
2025-01-27
-
5.224 Not available yet Release date not stated
2025-01-23
-
5.223 Not available yet Release date not stated
2025-01-17
-
5.222 Not available yet Release date not stated
2024-12-12
-
5.221 Not available yet Release date not stated
2024-11-10
-
5.220 Not available yet Release date not stated
Fixed issue with the topbar not using the correct White label icon and title for some users.
-
5.219 Not available yet Release date not stated
Improved translations in the plugin.
-
5.218 Not available yet Release date not stated
Added headers to prevent caching on Cloudflare and other proxies.
-
5.217 Not available yet Release date not stated
Fix: Events logger emails had a bug where the content generated list did not look correctly in the email.
-
5.216 Not available yet Release date not stated
Refactored the code for enabling the firewall.
-
5.215 Not available yet Release date not stated
Fix: Resolved an issue with error messages showing up regarding \wfsnelmodules missing. Thank you everyone reporting this issue.
-
5.214 Not available yet Release date not stated
Fixed issues with 2FA setup not working for some users.
-
5.213 Not available yet Release date not stated
Fixed an issue where license activation could lead to a flood of email verification requests. This occurred when users agreed to activate th...
-
5.212 Not available yet Release date not stated
Resolved issues causing unexpected errors for some users.
-
5.211 Not available yet Release date not stated
Code cleanup and refactoring.
-
5.210 Not available yet Release date not stated
Feature: Core Scanner module now available to all users. Keeping your core files safe is important.
-
5.209 Not available yet Release date not stated
Improved 2FA setup and verification process.
-
5.208 Not available yet Release date not stated
General: Added and updated PHPDoc comments for better code documentation and consistency.
-
5.207 Not available yet Release date not stated
Fixed issue with White label feature warning in vulnerability module.
-
5.206 Not available yet Release date not stated
A linebreak too much in the test descriptions allowed some text to show up in the footer of the plugin.
-
5.205 Not available yet Release date not stated
Fixed bug not able to storing CIDR ranges.
-
5.204 Not available yet Release date not stated
Fixed an issue in the Scheduled Scanner where email reports always indicated changes, even when none occurred. The reports now accurately re...
-
5.203 Not available yet Release date not stated
Fix: Resolved an issue that caused theme tests to fail for some users, ensuring smoother theme compatibility checks.
-
5.202 Not available yet Release date not stated
New: Introduced a file viewer for both the Core Scanner and Malware Scanner, enhancing the plugin's security auditing capabilities.
-
5.201 Not available yet Release date not stated
Tests: Updated MySQL recommendation to align with the latest WordPress minimum requirements. Thanks to Kittipot for the contribution.
-
5.200 Not available yet Release date not stated
Updated wp-config.php file permissions test.
-
5.199 Not available yet Release date not stated
Fix in malware scanner whitelist, thank you Christian.
-
5.198 Not available yet Release date not stated
Fixed a minor PHP notice triggered by the test for potential sensitive information leaks in headers. Special thanks to Koichi for reporting...
-
5.197 Not available yet Release date not stated
Fix for White label not hiding on some specific configurations, thank you Michael.
-
5.196 Not available yet Release date not stated
Improved responses from security tests to include more details.
-
5.195 Not available yet Release date not stated
Improved 2FA business logic. Special thanks to all users for their valuable feedback and suggestions.
-
5.194 Not available yet Release date not stated
Regression fixes from issues in 5.192 + version bump to 5.194
-
5.192 Not available yet Release date not stated
Enhancement: Added more details to security test reports and fixed minor issues.
-
5.191 Not available yet Release date not stated
Tested up to WordPress 6.5.4
-
5.190 Not available yet Release date not stated
New: Added MainwP integration for White label. Remote control your white label settings.
-
5.189 Not available yet Release date not stated
Enhancement: Improved automatic removal of unwanted files, including common backup and development files, as well as files matching specific...
-
5.188 Not available yet Release date not stated
Improvement: Reworked the dashboard widget overview.
-
5.187 Not available yet Release date not stated
Improvement: Stopped logging changes to posts without a title to avoid cluttering logs with irrelevant data.
-
5.186 Not available yet Release date not stated
Fix: Scheduled Scanner not working properly in some configurations and did not execute the scheduled scans. Optimized the module to load fas...
-
5.185 Not available yet Release date not stated
Fix: Resolved an issue where the white label feature did not consistently rename the plugin in all locations when a new name was entered in...
-
5.184 Not available yet Release date not stated
Improved cloud firewall IP detection - made the firewall faster.
-
5.183 Not available yet Release date not stated
Enhanced Multisite Compatibility: Corrected the counting of network activated plugins. Special thanks to Tom for identifying this issue.
-
5.182 Not available yet Release date not stated
New: Events logger can now be deactivated; default is off.
-
5.181 Not available yet Release date not stated
Added more details to blocked requests, eg. requesturi to help pinpoint patterns or methods. Thank you Bill.
-
5.180 Not available yet Release date not stated
Resolved a problem with IP blocking that allowed repeated login attempts to go unchecked.
-
5.179 Not available yet Release date not stated
Fixed problem where the license.txt and readme.html file was not automatically removed even if featured turned on. Thank you Ismael.
-
5.178 Not available yet Release date not stated
Added our first addon - MainWP
-
5.177 Not available yet Release date not stated
Improvement for the White Label feature - Setting a maxiumum size if using SVG as an icon. Thank you Daniel.
Readme
LicenseSecurity Ninja (Premium)
Check your site for security vulnerabilities and get precise suggestions for corrective actions on passwords, user accounts, file permissions, database security, version hiding, plugins, themes, security headers and other security aspects.
Security Ninja is a lightweight WordPress security plugin that helps protect your site from common attacks and security mistakes - without turning your dashboard into a cockpit.
[youtube https://www.youtube.com/watch?v=5zzzQTPmbS0]
Web Application Firewall (WAF) (based on the 8G ruleset) to block common malicious requests, plus 50+ security checks, a full vulnerability scanner, and a core integrity scanner to spot risky settings and unexpected file changes.
Upgrade to Pro for Cloud Firewall, malware scanning/cleanup, login brute-force protection and 2FA, export/webhooks, and scheduled scans.
This plugin can be downloaded for free without any paid subscription from the official WordPress repository.
Included for free
- Basic Firewall (8G-based) – Blocks common malicious requests and bot noise before it becomes a problem.
- 50+ Security Tests – Fast audit of common WordPress security misconfigurations.
- Vulnerability Scanner – Highlights known issues in plugins/themes so you can patch faster.
- Core Scanner – Detect modified or unexpected files in WordPress core folders.
- Basic Events Logger – Logs firewall events and login attempts (successful/failed).
- AI Security Advisor (WordPress 7) – AI-generated audit summaries and guided follow-ups from your scans, using WordPress AI Connectors (you choose the LLM provider). Optional WordPress Abilities let other AI tools on your site read test summaries, attack activity, and your latest saved report.
Pro adds
- Cloud Firewall & advanced WAF – Block 600+ million known bad IPs, country blocking, IP management, and stronger firewall controls (free includes the 8G-based firewall).
- Advanced Malware Scanner – Detect and clean malicious code and suspicious files.
- Login protection & 2FA – Limit failed logins, rename the login URL, and add two-factor authentication.
- One-click Fixes – Harden WordPress from the Fixes page (XML-RPC, file editor, headers, and more).
- Full Events Logger – Export logs, scheduled email reports, webhooks (e.g. Slack/Discord), and deeper alerting.
- Scheduled scans & reporting – Automated security scans and reports.
Key Features
Security Ninja is a lightweight WordPress firewall plugin and security toolkit designed to help you find misconfigurations, block common attacks, and stay ahead of known vulnerabilities - without slowing your site down.
Comprehensive WordPress Security Testing
Security Ninja performs 50+ advanced security tests to identify issues before attackers exploit them. This includes:
- Login and password checks – Audits weak passwords and related settings (Pro adds failed-login limits, rename login, and 2FA).
- File integrity monitoring – Detects unauthorized changes to WordPress core files, themes, and plugins.
- Database security checks – Identifies weak database permissions and potential SQL injection threats.
- User role audits – Ensures no unauthorized administrator accounts exist.
- Security misconfiguration scans – Identifies and fixes weak settings that could compromise security.
Enhanced Vulnerability Scanner
Proactively alerts you to known vulnerabilities in plugins and themes so you can patch before they are exploited.
Core Scanner – WordPress Installation Integrity
Ensures your WordPress installation remains untampered and free of unauthorized files.
- Full core file integrity check – Scans every file in core WordPress folders for modifications.
- Unknown file detection – Flags extra or unexpected files in core directories.
- Built-in file viewer – Review flagged files in the dashboard.
- Restore or delete – Restore altered core files with one click, or remove suspicious unknowns.
Advanced Malware Scanner – Detect & Remove Malware Instantly (PRO)
Security Ninja includes a high-performance malware scanner that automatically checks your WordPress core, plugins and themes for:
- Malicious scripts and backdoors – Identifies hidden malware and harmful injections.
- Trojan and virus detection – Scans for suspicious PHP and JavaScript entries.
- One-click malware removal – Instantly quarantine and delete infected files.
WordPress Firewall & Real-Time Threat Protection
Security Ninja includes a basic firewall for free (8G-based) to block common malicious requests. Upgrade to Pro for more advanced WAF controls.
- Basic protection (Free) – 8G rules block many common exploit patterns and abusive requests.
- Advanced protection (Pro) – Cloud Firewall, country blocking, IP lists, and additional intelligence/automation.
- Login brute-force protection (Pro) – Limit failed logins and harden the login flow (not included in the free firewall).
Automatic service whitelisting (Pro)
Cloud Firewall (Pro) whitelists known third-party service IPs so remote maintenance, optimization, and monitoring tools are less likely to be blocked. No manual IP entry is required for these built-in lists.
- WP Compress – image optimization and compression service
- MonSpark – uptime and website monitoring
- Modular DS – remote site management
- WPMU DEV – hosting and management platform
- Divi Dash – Elegant Themes site management
- Fastpixel – optimization service
- Broken Link Checker – link checking service
- GetTerms – cookie consent scanner (getterms.io)
Optional one-click whitelists (Firewall → IP Management; enable per service):
- ManageWP – enabled by default on new installs
- WP Rocket – caching and optimization
- UptimeRobot – uptime monitoring
- Uptimia – uptime monitoring
You can still add your own IPs and CIDR ranges manually on the IP Management screen.
Login Security & Two-Factor Authentication (2FA) (PRO)
Your WordPress login page is a primary target for hackers. Security Ninja enhances login security with:
- Two-Factor Authentication (2FA) – Requires additional verification for safer logins.
- Brute-force attack protection – Limits failed login attempts to block unauthorized access.
- Rename login - Getting a lot of requests to your login form? Hide it for spammers.
One-Click Security Fixes & WordPress Hardening (PRO)
Manually fixing security issues is time-consuming. Security Ninja provides one-click hardening to:
- Disable XML-RPC – Blocks common DDoS attacks and brute-force exploits.
- Restrict file editing – Prevents unauthorized theme and plugin modifications.
- Hide PHP error messages – Stops hackers from exploiting sensitive error details.
And many more fixes to harden your WordPress security!
Events Logger / Activity Tracking
Security Ninja includes a basic events logger for free so you can see what’s happening on your site.
- Free: firewall events and login attempts (successful/failed) in the dashboard.
- Pro: export security logs, scheduled email reports, webhooks (e.g. Slack/Discord), and deeper alerting.
Automated Security Scans & Reports (PRO)
Security Ninja performs scheduled security scans and sends reports directly to your inbox.
- Set up daily, weekly, or monthly security scans.
- Receive email alerts about vulnerabilities and malware infections.
- Analyze detailed reports to keep your website secure.
Block Spam & Malicious Bots Instantly (PRO)
Hackers and spammers use bots to exploit WordPress websites. Security Ninja prevents:
- Fake registrations and spam comments – Stops bots from even getting to your site.
- Malicious bot attacks – Blocks scripts attempting to hack your site.
- Unwanted traffic – Reduces server load by preventing unnecessary bot access.
AI Security Advisor - from scan results to clear next steps (WordPress 7)
Understanding a security scan shouldn’t feel like homework. AI Security Advisor uses your connected LLM (via WordPress 7 AI Connectors) to turn Security Ninja findings into a readable audit: executive summary, prioritized improvements, and suggested follow-up prompts-not an open-ended chatbot.
Reports draw on Security Tests, the Vulnerability Scanner, Core Scanner, recent firewall/login events, and on Pro sites Malware Scanner results when available. Saved reports stay on your site until you remove them.
What you need
AI Security Advisor is included in the free plugin but requires WordPress 7. You connect the AI/LLM provider yourself under Settings → Connectors in WordPress; Security Ninja does not host or supply API keys.
WordPress Abilities (optional)
On WordPress 7, Security Ninja can register read-only Abilities so other AI tools on the same site can fetch a test summary, 7-day attack activity, or your latest saved audit-useful if you use multiple AI integrations. Report generation and follow-ups on the Security Advisor page work independently of this.
Privacy, in everyday language
Only non-identifying security context (test results, scan status, event counts-not personal data) is sent to your chosen AI provider to build a report.
If you are not on WordPress 7 yet, you will see a notice on the AI Security Advisor screen; the rest of Security Ninja continues to work as usual.
Join thousands of satisfied users who trust Security Ninja to keep their websites safe. Start protecting your online presence today.
=Extensions=
MainWP - Manage Security Ninja across many sites from one MainWP Dashboard. Security Ninja on each child site includes MainWP integration built in (no extra plugin on child sites).
- Free addon - Security Ninja for MainWP (WordPress.org): view test results and vulnerabilities per site, trigger remote security scans, and sync fresh results. Works with child sites on free or Pro Security Ninja; data shown matches what each site’s installed version provides.
- Premium addon - Adds a combined events log across all connected sites, search/filter for security events, and remote white-label control on Pro child sites. Requires Security Ninja Pro on child sites for log and white-label features. Available from your WP Security Ninja account; see MainWP integration for details.
https://wordpress.org/plugins/security-ninja-for-mainwp/
Security Ninja Pro adds Cloud Firewall (600+ million known bad IPs), country blocking, advanced WAF controls, Malware Scanner, login protection (failed-login limits, rename login, 2FA), One-click Fixes, full Events Logger (export, webhooks, scheduled reports), and scheduled scans. The free plugin already includes the 8G firewall, 50+ security tests, Vulnerability Scanner, Core Scanner, basic Events Logger, and AI Security Advisor on WordPress 7.
An all-in-one security solution for any site. With premium support and continuous updates Security Ninja Pro is a perfect tool to keep your site safe. See what the PRO version offers
Automatically block 600+ million bad IPs with one click! Security Ninja Pro Firewall will help you stay one step ahead of bad guys by using the collective know-how of millions of attacked sites, and ban bad guys before they even open your site.
Read more about Pro features on the Security Ninja website
What others say about the plugin
- Kinsta
- Hostinger
- Cloudways
- AppSumo
- Freemius
- WP Mayor: "Easy-to-Use WordPress Security Plugin"
- WPMarmite
- WPExplorer
- WPLift
- WP Loop
- InfluenceWP
- G2
Tests
-
The tests include:
- brute-force attack on user accounts to test password strength
- numerous installation parameters tests
- file permissions
- version hiding
- 0-day exploits tests
- debug and auto-update modes tests
- database configuration tests
- Apache and PHP related tests
- WP options tests
- security headers and related server response checks
-
The full suite covers 50+ checks across WordPress core/plugins/themes, user accounts and passwords, file permissions, debug modes, database configuration, PHP settings, security headers, and more. Open Security Ninja in your dashboard for the complete list with explanations and fix guidance.
License info
-
jQuery Cookie Plugin, Copyright 2013 Klaus Hartl
-
The vulnerability scanner uses data from the National Vulnerability Database - NVD
-
This product includes IP2Location LITE data available from https://lite.ip2location.com.
-
This plugin uses the Persist Admin notice Dismissals by Collins Agbonghama @collizo4sky
-
Firewall rules are based on 8G Firewall by Jeff Starr - https://perishablepress.com/8g-blacklist/
How can I report security bugs?
You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.
What it adds
- Integrates with WooCommerce
Installation
Installing from WordPress
- Open WordPress admin, go to Plugins, click Add New
- Enter "Security Ninja" in search and hit Enter
- Plugin will show up as the first on the list, click "Install Now"
- Activate & go to Tools - Security Ninja to make your site more secure
Installing Manually
- Download the plugin.
- Unzip it and upload to wp-content/plugin/
- Open WordPress admin - Plugins and click "Activate" next to the plugin
- Activate & go to Security Ninja to make your site more secure
Faq
Does the free version include a WordPress firewall (WAF)?
Yes. Security Ninja includes a basic Web Application Firewall (WAF) for free, based on the 8G ruleset. It blocks common malicious requests and reduces bot noise.
Does Security Ninja protect against brute force attacks and login attempts?
Pro includes login brute-force protection (failed-login limits), rename login, and 2FA. The free version records login attempts (successful/failed) in the Events Logger and runs security tests that check password strength-it does not block repeated failed logins on its own.
Does Security Ninja include a WordPress vulnerability scanner?
Yes. The Vulnerability Scanner is fully available in the free version and helps you identify known vulnerabilities in plugins/themes so you can patch quickly.
Who is this plugin for?
Site owners, agencies, and developers who want a lightweight WordPress security plugin to harden sites and catch problems early.
Will this plugin slow down my site?
In normal operation, no. Some scans can temporarily use more resources while they run.
What changes will Security Ninja make to my site?
Security Ninja runs checks and shows recommendations. Some Pro features can add active protection layers (firewall/WAF controls, login protection), which you can configure.
What if I encounter issues with the plugin?
While we strive for universal compatibility, if you face any issues, our support team is ready to assist. Visit our support forum to open a new thread, and we'll help you as soon as possible.
Screenshots
- Firewall & Events overview (blocked requests + quick stats).
- Firewall Events log (see what was blocked and why).
- Vulnerability Scanner (find vulnerable plugins/themes and patch fast).
- Security Tests (one-click audit with clear pass/fail results).
- Core Scanner (detect modified/unknown core files).
Install
composer require meteorgpl-plugin/security-ninja-premiumThe vendor’s license checks are intact: activate the plugin in WordPress with a license key bought from the vendor.
License
The plugin declares no license. The code is redistributed under the license the vendor declared in the plugin’s own headers.
Artwork, fonts, media and documents that may be licensed separately are not redistributed; the licensing page explains what is replaced or removed, and the security tab lists it per version. Support and update entitlement come with the license you buy from the vendor.